2 * Check decoding of chown/chown32/lchown/lchown32/fchown/fchown32 syscalls.
4 * Copyright (c) 2016 Dmitry V. Levin <ldv@altlinux.org>
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. The name of the author may not be used to endorse or promote products
16 * derived from this software without specific prior written permission.
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
19 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
20 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
21 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
22 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
23 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
24 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
25 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 #ifdef UGID_TYPE_IS_SHORT
35 # define UGID_TYPE short
36 # define GETEUID syscall(__NR_geteuid)
37 # define GETEGID syscall(__NR_getegid)
38 # define CHECK_OVERFLOWUID(arg) check_overflowuid(arg)
39 # define CHECK_OVERFLOWGID(arg) check_overflowgid(arg)
41 # define UGID_TYPE int
42 # define GETEUID geteuid()
43 # define GETEGID getegid()
44 # define CHECK_OVERFLOWUID(arg)
45 # define CHECK_OVERFLOWGID(arg)
48 #define UNLINK_SAMPLE \
49 if (unlink(sample)) perror_msg_and_fail("unlink")
50 #define CLOSE_SAMPLE \
51 if (close(fd)) perror_msg_and_fail("close")
53 #ifdef ACCESS_BY_DESCRIPTOR
54 # define SYSCALL_ARG1 fd
55 # define FMT_ARG1 "%d"
56 # define EOK_CMD CLOSE_SAMPLE
57 # define CLEANUP_CMD UNLINK_SAMPLE
59 # define SYSCALL_ARG1 sample
60 # define FMT_ARG1 "\"%s\""
61 # define EOK_CMD UNLINK_SAMPLE
62 # define CLEANUP_CMD CLOSE_SAMPLE
66 ugid2int(const unsigned UGID_TYPE id)
68 if ((unsigned UGID_TYPE) -1U == id)
75 print_int(const unsigned int num)
84 num_matches_id(const unsigned int num, const unsigned int id)
86 return num == id || num == -1U;
89 #define PAIR(val) { val, gid }, { uid, val }
94 static const char sample[] = SYSCALL_NAME "_sample";
96 unsigned int uid = GETEUID;
97 CHECK_OVERFLOWUID(uid);
98 unsigned int gid = GETEGID;
99 CHECK_OVERFLOWUID(gid);
105 { (unsigned long) 0xffffffff00000000ULL | uid, gid },
106 { uid, (unsigned long) 0xffffffff00000000ULL | gid },
109 { 0xffff0000U | uid, gid },
110 { uid, 0xffff0000U | gid },
114 PAIR((long) 0xfacefeeddeadbeefULL)
117 int fd = open(sample, O_RDONLY | O_CREAT, 0400);
119 perror_msg_and_fail("open");
126 for (i = 0; i < ARRAY_SIZE(tests); ++i) {
127 const unsigned int unum = ugid2int(tests[i].uid);
128 const unsigned int gnum = ugid2int(tests[i].gid);
130 if (num_matches_id(unum, uid) &&
131 num_matches_id(gnum, gid)) {
141 const long rc = syscall(SYSCALL_NR, SYSCALL_ARG1,
142 tests[i].uid, tests[i].gid);
143 const char *errstr = sprintrc(rc);
144 printf("%s(" FMT_ARG1, SYSCALL_NAME, SYSCALL_ARG1);
147 printf(") = %s\n", errstr);
150 puts("+++ exited with 0 +++");